Add gitlab known hosts

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/elara/configs/git/default.nix

@@ -8,6 +8,7 @@
 let
   selfPkgs = inputs.self.packages.${system};
 in
+# Configured for the root user to allow private builds
 {
   sops.secrets."ssh/sas/ed25519/key" = {
     sopsFile = "${inputs.secrets}/sas/secrets.yaml";

hosts/elara/users/nikara/configs/console/git/default.nix

@@ -93,7 +93,10 @@ in
         userKnownHostsFiles =
           with selfPkgs;
           (
-            [ ssh-known-hosts-github ]
+            [
+              ssh-known-hosts-github
+              ssh-known-hosts-gitlab
+            ]
             ++ lib.lists.optionals config.sas.build.private [
               ssh-known-hosts-sas-gitlab
               ssh-known-hosts-sas-gerrit

hosts/himalia/users/nick/configs/console/git/default.nix

@@ -39,7 +39,10 @@ in
         };
       };
 
-      userKnownHostsFiles = with selfPkgs; [ ssh-known-hosts-github ];
+      userKnownHostsFiles = with selfPkgs; [
+        ssh-known-hosts-github
+        ssh-known-hosts-gitlab
+      ];
     };
   };
 }

hosts/installer/users/nick/configs/console/git/default.nix

@@ -39,7 +39,10 @@ in
         };
       };
 
-      userKnownHostsFiles = with selfPkgs; [ ssh-known-hosts-github ];
+      userKnownHostsFiles = with selfPkgs; [
+        ssh-known-hosts-github
+        ssh-known-hosts-gitlab
+      ];
     };
   };
 }

packages/default.nix

@@ -87,6 +87,7 @@ in
   shlink-web-client = callPackage ./shlink-web-client { };
 
   ssh-known-hosts-github = callPackage ./ssh/known-hosts/github { };
+  ssh-known-hosts-gitlab = callPackage ./ssh/known-hosts/gitlab { };
 
   yazi-plugin-custom-shell = callPackage ./yazi/plugins/custom-shell { };
 

packages/ssh/known-hosts/gitlab/default.nix

@@ -0,0 +1,21 @@
+{
+  pkgs,
+  inputs,
+  system,
+  ...
+}:
+pkgs.stdenv.mkDerivation {
+  pname = "ssh-known-hosts-github";
+  version = "0-unstable-2025-02-25";
+
+  src = inputs.self.lib.${system}.fetchers.sshKnownHosts {
+    host = "gitlab.com";
+    hash = "sha256-5flUNj4vKn1Y2YE8bkUcsW3kQLRKn8WB3uPUxlhZMTk=";
+  };
+
+  phases = [ "installPhase" ];
+
+  installPhase = ''
+    cp $src $out
+  '';
+}